dradis-calculator_cvss 4.11.0 → 4.13.0

data/app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/cvss_details.js

@@ -0,0 +1,18 @@
+// Copyright FIRST, Red Hat, and contributors
+// SPDX-License-Identifier: BSD-2-Clause
+
+cvssMacroVectorDetails = {
+  "Exploitability": 0,
+  "Complexity": 1,
+  "VulnerableSystem": 2,
+  "SubsequentSystem": 3,
+  "Exploitation": 4,
+  "SecurityRequirements": 5
+}
+
+cvssMacroVectorValues = {
+  "0": "High",
+  "1": "Medium",
+  "2": "Low",
+  "3": "None",
+}

data/app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/cvss_lookup.js

@@ -0,0 +1,275 @@
+// Copyright FIRST, Red Hat, and contributors
+// SPDX-License-Identifier: BSD-2-Clause
+
+cvssLookup_global = {
+  "000000": 10,
+  "000001": 9.9,
+  "000010": 9.8,
+  "000011": 9.5,
+  "000020": 9.5,
+  "000021": 9.2,
+  "000100": 10,
+  "000101": 9.6,
+  "000110": 9.3,
+  "000111": 8.7,
+  "000120": 9.1,
+  "000121": 8.1,
+  "000200": 9.3,
+  "000201": 9,
+  "000210": 8.9,
+  "000211": 8,
+  "000220": 8.1,
+  "000221": 6.8,
+  "001000": 9.8,
+  "001001": 9.5,
+  "001010": 9.5,
+  "001011": 9.2,
+  "001020": 9,
+  "001021": 8.4,
+  "001100": 9.3,
+  "001101": 9.2,
+  "001110": 8.9,
+  "001111": 8.1,
+  "001120": 8.1,
+  "001121": 6.5,
+  "001200": 8.8,
+  "001201": 8,
+  "001210": 7.8,
+  "001211": 7,
+  "001220": 6.9,
+  "001221": 4.8,
+  "002001": 9.2,
+  "002011": 8.2,
+  "002021": 7.2,
+  "002101": 7.9,
+  "002111": 6.9,
+  "002121": 5,
+  "002201": 6.9,
+  "002211": 5.5,
+  "002221": 2.7,
+  "010000": 9.9,
+  "010001": 9.7,
+  "010010": 9.5,
+  "010011": 9.2,
+  "010020": 9.2,
+  "010021": 8.5,
+  "010100": 9.5,
+  "010101": 9.1,
+  "010110": 9,
+  "010111": 8.3,
+  "010120": 8.4,
+  "010121": 7.1,
+  "010200": 9.2,
+  "010201": 8.1,
+  "010210": 8.2,
+  "010211": 7.1,
+  "010220": 7.2,
+  "010221": 5.3,
+  "011000": 9.5,
+  "011001": 9.3,
+  "011010": 9.2,
+  "011011": 8.5,
+  "011020": 8.5,
+  "011021": 7.3,
+  "011100": 9.2,
+  "011101": 8.2,
+  "011110": 8,
+  "011111": 7.2,
+  "011120": 7,
+  "011121": 5.9,
+  "011200": 8.4,
+  "011201": 7,
+  "011210": 7.1,
+  "011211": 5.2,
+  "011220": 5,
+  "011221": 3,
+  "012001": 8.6,
+  "012011": 7.5,
+  "012021": 5.2,
+  "012101": 7.1,
+  "012111": 5.2,
+  "012121": 2.9,
+  "012201": 6.3,
+  "012211": 2.9,
+  "012221": 1.7,
+  "100000": 9.8,
+  "100001": 9.5,
+  "100010": 9.4,
+  "100011": 8.7,
+  "100020": 9.1,
+  "100021": 8.1,
+  "100100": 9.4,
+  "100101": 8.9,
+  "100110": 8.6,
+  "100111": 7.4,
+  "100120": 7.7,
+  "100121": 6.4,
+  "100200": 8.7,
+  "100201": 7.5,
+  "100210": 7.4,
+  "100211": 6.3,
+  "100220": 6.3,
+  "100221": 4.9,
+  "101000": 9.4,
+  "101001": 8.9,
+  "101010": 8.8,
+  "101011": 7.7,
+  "101020": 7.6,
+  "101021": 6.7,
+  "101100": 8.6,
+  "101101": 7.6,
+  "101110": 7.4,
+  "101111": 5.8,
+  "101120": 5.9,
+  "101121": 5,
+  "101200": 7.2,
+  "101201": 5.7,
+  "101210": 5.7,
+  "101211": 5.2,
+  "101220": 5.2,
+  "101221": 2.5,
+  "102001": 8.3,
+  "102011": 7,
+  "102021": 5.4,
+  "102101": 6.5,
+  "102111": 5.8,
+  "102121": 2.6,
+  "102201": 5.3,
+  "102211": 2.1,
+  "102221": 1.3,
+  "110000": 9.5,
+  "110001": 9,
+  "110010": 8.8,
+  "110011": 7.6,
+  "110020": 7.6,
+  "110021": 7,
+  "110100": 9,
+  "110101": 7.7,
+  "110110": 7.5,
+  "110111": 6.2,
+  "110120": 6.1,
+  "110121": 5.3,
+  "110200": 7.7,
+  "110201": 6.6,
+  "110210": 6.8,
+  "110211": 5.9,
+  "110220": 5.2,
+  "110221": 3,
+  "111000": 8.9,
+  "111001": 7.8,
+  "111010": 7.6,
+  "111011": 6.7,
+  "111020": 6.2,
+  "111021": 5.8,
+  "111100": 7.4,
+  "111101": 5.9,
+  "111110": 5.7,
+  "111111": 5.7,
+  "111120": 4.7,
+  "111121": 2.3,
+  "111200": 6.1,
+  "111201": 5.2,
+  "111210": 5.7,
+  "111211": 2.9,
+  "111220": 2.4,
+  "111221": 1.6,
+  "112001": 7.1,
+  "112011": 5.9,
+  "112021": 3,
+  "112101": 5.8,
+  "112111": 2.6,
+  "112121": 1.5,
+  "112201": 2.3,
+  "112211": 1.3,
+  "112221": 0.6,
+  "200000": 9.3,
+  "200001": 8.7,
+  "200010": 8.6,
+  "200011": 7.2,
+  "200020": 7.5,
+  "200021": 5.8,
+  "200100": 8.6,
+  "200101": 7.4,
+  "200110": 7.4,
+  "200111": 6.1,
+  "200120": 5.6,
+  "200121": 3.4,
+  "200200": 7,
+  "200201": 5.4,
+  "200210": 5.2,
+  "200211": 4,
+  "200220": 4,
+  "200221": 2.2,
+  "201000": 8.5,
+  "201001": 7.5,
+  "201010": 7.4,
+  "201011": 5.5,
+  "201020": 6.2,
+  "201021": 5.1,
+  "201100": 7.2,
+  "201101": 5.7,
+  "201110": 5.5,
+  "201111": 4.1,
+  "201120": 4.6,
+  "201121": 1.9,
+  "201200": 5.3,
+  "201201": 3.6,
+  "201210": 3.4,
+  "201211": 1.9,
+  "201220": 1.9,
+  "201221": 0.8,
+  "202001": 6.4,
+  "202011": 5.1,
+  "202021": 2,
+  "202101": 4.7,
+  "202111": 2.1,
+  "202121": 1.1,
+  "202201": 2.4,
+  "202211": 0.9,
+  "202221": 0.4,
+  "210000": 8.8,
+  "210001": 7.5,
+  "210010": 7.3,
+  "210011": 5.3,
+  "210020": 6,
+  "210021": 5,
+  "210100": 7.3,
+  "210101": 5.5,
+  "210110": 5.9,
+  "210111": 4,
+  "210120": 4.1,
+  "210121": 2,
+  "210200": 5.4,
+  "210201": 4.3,
+  "210210": 4.5,
+  "210211": 2.2,
+  "210220": 2,
+  "210221": 1.1,
+  "211000": 7.5,
+  "211001": 5.5,
+  "211010": 5.8,
+  "211011": 4.5,
+  "211020": 4,
+  "211021": 2.1,
+  "211100": 6.1,
+  "211101": 5.1,
+  "211110": 4.8,
+  "211111": 1.8,
+  "211120": 2,
+  "211121": 0.9,
+  "211200": 4.6,
+  "211201": 1.8,
+  "211210": 1.7,
+  "211211": 0.7,
+  "211220": 0.8,
+  "211221": 0.2,
+  "212001": 5.3,
+  "212011": 2.4,
+  "212021": 1.4,
+  "212101": 2.4,
+  "212111": 1.2,
+  "212121": 0.5,
+  "212201": 1,
+  "212211": 0.3,
+  "212221": 0.1,
+}

data/app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/max_composed.js

@@ -0,0 +1,35 @@
+// Copyright FIRST, Red Hat, and contributors
+// SPDX-License-Identifier: BSD-2-Clause
+
+maxComposed = {
+	// EQ1
+	"eq1": {
+		0: ["AV:N/PR:N/UI:N/"],
+		1: ["AV:A/PR:N/UI:N/", "AV:N/PR:L/UI:N/", "AV:N/PR:N/UI:P/"],
+		2: ["AV:P/PR:N/UI:N/", "AV:A/PR:L/UI:P/"]
+	},
+	// EQ2
+	"eq2": {
+		0: ["AC:L/AT:N/"],
+		1: ["AC:H/AT:N/", "AC:L/AT:P/"]
+	},
+	// EQ3+EQ6
+	"eq3": {
+		0: { "0": ["VC:H/VI:H/VA:H/CR:H/IR:H/AR:H/"], "1": ["VC:H/VI:H/VA:L/CR:M/IR:M/AR:H/", "VC:H/VI:H/VA:H/CR:M/IR:M/AR:M/"] },
+		1: { "0": ["VC:L/VI:H/VA:H/CR:H/IR:H/AR:H/", "VC:H/VI:L/VA:H/CR:H/IR:H/AR:H/"], "1": ["VC:L/VI:H/VA:L/CR:H/IR:M/AR:H/", "VC:L/VI:H/VA:H/CR:H/IR:M/AR:M/", "VC:H/VI:L/VA:H/CR:M/IR:H/AR:M/", "VC:H/VI:L/VA:L/CR:M/IR:H/AR:H/", "VC:L/VI:L/VA:H/CR:H/IR:H/AR:M/"] },
+		2: { "1": ["VC:L/VI:L/VA:L/CR:H/IR:H/AR:H/"] },
+	},
+	// EQ4
+	"eq4": {
+		0: ["SC:H/SI:S/SA:S/"],
+		1: ["SC:H/SI:H/SA:H/"],
+		2: ["SC:L/SI:L/SA:L/"]
+
+	},
+	// EQ5
+	"eq5": {
+		0: ["E:A/"],
+		1: ["E:P/"],
+		2: ["E:U/"],
+	},
+}

data/app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/max_severity.js

@@ -0,0 +1,30 @@
+// Copyright FIRST, Red Hat, and contributors
+// SPDX-License-Identifier: BSD-2-Clause
+
+// max severity distances in EQs MacroVectors (+1)
+maxSeverity = {
+	"eq1": {
+		0: 1,
+		1: 4,
+		2: 5
+	},
+	"eq2": {
+		0: 1,
+		1: 2
+	},
+	"eq3eq6": {
+		0: { 0: 7, 1: 6 },
+		1: { 0: 8, 1: 8 },
+		2: { 1: 10 }
+	},
+	"eq4": {
+		0: 6,
+		1: 5,
+		2: 4
+	},
+	"eq5": {
+		0: 1,
+		1: 1,
+		2: 1
+	},
+}

data/app/assets/javascripts/dradis/plugins/calculators/cvss/v4/vendor/metrics.js

@@ -0,0 +1,42 @@
+// Copyright FIRST, Red Hat, and contributors
+// SPDX-License-Identifier: BSD-2-Clause
+
+// CVSS v4.0 metrics ordering and valid values
+expectedMetricOrder = {
+    // Base (11 metrics)
+    "AV": ["N", "A", "L", "P"],
+    "AC": ["L", "H"],
+    "AT": ["N", "P"],
+    "PR": ["N", "L", "H"],
+    "UI": ["N", "P", "A"],
+    "VC": ["H", "L", "N"],
+    "VI": ["H", "L", "N"],
+    "VA": ["H", "L", "N"],
+    "SC": ["H", "L", "N"],
+    "SI": ["H", "L", "N"],
+    "SA": ["H", "L", "N"],
+    // Threat (1 metric)
+    "E": ["X", "A", "P", "U"],
+    // Environmental (14 metrics)
+    "CR":  ["X", "H", "M", "L"],
+    "IR":  ["X", "H", "M", "L"],
+    "AR":  ["X", "H", "M", "L"],
+    "MAV": ["X", "N", "A", "L", "P"],
+    "MAC": ["X", "L", "H"],
+    "MAT": ["X", "N", "P"],
+    "MPR": ["X", "N", "L", "H"],
+    "MUI": ["X", "N", "P", "A"],
+    "MVC": ["X", "H", "L", "N"],
+    "MVI": ["X", "H", "L", "N"],
+    "MVA": ["X", "H", "L", "N"],
+    "MSC": ["X", "H", "L", "N"],
+    "MSI": ["X", "S", "H", "L", "N"],
+    "MSA": ["X", "S", "H", "L", "N"],
+    // Supplemental (6 metrics)
+    "S":  ["X", "N", "P"],
+    "AU": ["X", "N", "Y"],
+    "R":  ["X", "A", "U", "I"],
+    "V":  ["X", "D", "C"],
+    "RE": ["X", "L", "M", "H"],
+    "U":  ["X", "Clear", "Green", "Amber", "Red"],
+}

data/app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/application.css.scss

@@ -2,4 +2,5 @@
 @import 'font-awesome';
 
 @import 'tylium/variables';
-@import 'dradis/plugins/calculators/cvss/version_switch';
+@import 'shared/mixins';
+@import 'tylium/modules/buttons';

data/app/assets/stylesheets/dradis/plugins/calculators/cvss/manifests/tylium.scss

@@ -1,2 +1 @@
-@import "tylium/variables";
-@import "dradis/plugins/calculators/cvss/version_switch"
+@import 'tylium/variables';

data/app/controllers/dradis/plugins/calculators/cvss/base_controller.rb

@@ -2,7 +2,9 @@ module Dradis::Plugins::Calculators::CVSS
   # Does it matter that we're inheriting from the no-frills controller?
   class BaseController < ActionController::Base
     def index
-      @cvss_vector = Hash.new { |h, k| h[k] = 'X' }
+      @cvss3_vector = Hash.new { |h, k| h[k] = 'X' }
+      @cvss4_vector = Dradis::Plugins::Calculators::CVSS::V4::DEFAULT_CVSS_V4.clone
+      @cvss_version = '4.0'
     end
   end
 end

data/app/controllers/dradis/plugins/calculators/cvss/issues_controller.rb

@@ -1,10 +1,10 @@
 module Dradis::Plugins::Calculators::CVSS
   # Does it matter that we're inheriting from the no-frills controller?
   class IssuesController < ::IssuesController
+    before_action :set_cvss_version, only: :edit
     before_action :set_cvss_vector, only: :edit
 
-    def edit
-    end
+    def edit; end
 
     def update
       cvss_fields = Hash[ *params[:cvss_fields].scan(FieldParser::FIELDS_REGEX).flatten.map(&:strip) ]
@@ -19,19 +19,45 @@ module Dradis::Plugins::Calculators::CVSS
       end
     end
 
+    private
+
     def set_cvss_vector
       # Undefined Temporal and Environmental default to X
-      @cvss_vector = Hash.new { |h, k| h[k] = 'X' }
-      field_value  = @issue.fields['CVSSv3.Vector'] || @issue.fields['CVSSv3Vector']
+      @cvss3_vector = Hash.new { |h, k| h[k] = 'X' }
+      @cvss4_vector = Dradis::Plugins::Calculators::CVSS::V4::DEFAULT_CVSS_V4.clone
+      field_value_v3 = @issue.fields['CVSSv3.Vector'] || @issue.fields['CVSSv3Vector']
+      field_value_v4  = @issue.fields['CVSSv4.BaseVector']
 
       # If no vector is set yet, that's OK
-      return if field_value.blank?
+      return if field_value_v3.blank? && field_value_v4.blank?
 
-      if field_value =~ V3::VECTOR_REGEXP
-        field_value.split('/').each { |pair| @cvss_vector.store *pair.split(':') }
-      else
-        redirect_to main_app.project_issue_path(current_project, @issue), alert: 'The format of the CVSSv3 Vector field is invalid.'
+      if field_value_v3
+        if field_value_v3 =~ V3::VECTOR_REGEXP
+          field_value_v3.split('/').each { |pair| @cvss3_vector.store *pair.split(':') }
+        else
+          redirect_to main_app.project_issue_path(current_project, @issue), alert: 'The format of the CVSSv3 Vector field is invalid.'
+        end
       end
+
+      if field_value_v4
+        if field_value_v4.starts_with?('CVSS:4.0')
+          field_value_v4.split('/').each { |pair| @cvss4_vector.store *pair.split(':') }
+        else
+          redirect_to main_app.project_issue_path(current_project, @issue), alert: 'The format of the CVSSv4 Vector field is invalid.'
+        end
+      end
+    end
+
+    def set_cvss_version
+      @cvss_version =
+        case
+        when @issue.fields['CVSSv3.Vector']&.include?('CVSS:3.1')
+          '3.1'
+        when @issue.fields['CVSSv3.Vector']&.include?('CVSS:3.0')
+          '3.0'
+        else
+          '4.0'
+        end
     end
   end
 end

data/app/models/dradis/plugins/calculators/cvss/v4.rb

@@ -0,0 +1,89 @@
+module Dradis::Plugins::Calculators::CVSS
+  class V4
+    DEFAULT_CVSS_V4 = {
+      'AV' => 'N',
+      'AC' => 'L',
+      'AT' => 'N',
+      'PR' => 'N',
+      'UI' => 'N',
+      'VC' => 'N',
+      'VI' => 'N',
+      'VA' => 'N',
+      'SC' => 'N',
+      'SI' => 'N',
+      'SA' => 'N',
+      'E' => 'X',
+      'CR' => 'X',
+      'IR' => 'X',
+      'AR' => 'X',
+      'MAV' => 'X',
+      'MAC' => 'X',
+      'MAT' => 'X',
+      'MPR' => 'X',
+      'MUI' => 'X',
+      'MVC' => 'X',
+      'MVI' => 'X',
+      'MVA' => 'X',
+      'MSC' => 'X',
+      'MSI' => 'X',
+      'MSA' => 'X',
+      'S' => 'X',
+      'AU' => 'X',
+      'R' => 'X',
+      'V' => 'X',
+      'RE' => 'X',
+      'U' => 'X'
+    }
+
+    FIELD_NAMES = %i{
+      BaseScore
+      BaseSeverity
+
+      MacroVector
+      Exploitability
+      Complexity
+      VulnerableSystem
+      SubsequentSystem
+      Exploitation
+      SecurityRequirements
+
+      BaseExploitableAttackVector
+      BaseExploitableAttackComplexity
+      BaseExploitableAttackRequirements
+      BaseExploitablePrivilegesRequired
+      BaseExploitableUserInteraction
+      BaseVulnerableConfidentiality
+      BaseVulnerableIntegrity
+      BaseVulnerableAvailability
+      BaseSubsequentConfidentiality
+      BaseSubsequentIntegrity
+      BaseSubsequentAvailability
+
+      SupplementalSafety
+      SupplementalAutomatable
+      SupplementalRecovery
+      SupplementalValueDensity
+      SupplementalVulnerabilityResponseEffort
+      SupplementalProviderUrgency
+
+      EnvironmentalExploitabilityAttackVector
+      EnvironmentalExploitabilityAttackComplexity
+      EnvironmentalExploitabilityAttackRequirements
+      EnvironmentalExploitabilityPrivilegesRequired
+      EnvironmentalExploitabilityUserInteraction
+      EnvironmentalVulnerableConfidentiality
+      EnvironmentalVulnerableIntegrity
+      EnvironmentalVulnerableAvailability
+      EnvironmentalSubsequentConfidentiality
+      EnvironmentalSubsequentIntegrity
+      EnvironmentalSubsequentAvailability
+      EnvironmentalConfidentialityRequirements
+      EnvironmentalIntegrityRequirements
+      EnvironmentalAvailabilityRequirements
+
+      ThreatExploitMaturity
+    }.freeze
+
+    FIELDS = (['CVSSv4.BaseVector'.freeze] + FIELD_NAMES.map { |name| "CVSSv4.#{name}".freeze }).freeze
+  end
+end

data/app/views/dradis/plugins/calculators/cvss/_version_menu.html.erb

@@ -0,0 +1,8 @@
+<div class="d-flex align-items-center justify-content-end gap-2 small">
+  <label class="form-label m-0" for="cvss-version">Version:</label>
+  <select id="cvss-version" class="form-select" aria-label="cvss version select" data-behavior="cvss-version">
+    <option value="40" <%= 'selected' if @cvss_version == '4.0' %>>v4.0</option>
+    <option value="31" <%= 'selected' if @cvss_version == '3.1' %>>v3.1</option>
+    <option value="30" <%= 'selected' if @cvss_version == '3.0' %>>v3.0</option>
+  </select>
+</div>

data/app/views/dradis/plugins/calculators/cvss/base/index.html.erb

@@ -1,78 +1,17 @@
 <%= content_tag :div, class: 'page-header' do %>
-  <h1>CVSS score calculator</h1>
-  <%= render 'dradis/plugins/calculators/cvss/version_switch' %>
+  <h1 class="d-flex align-items-center justify-content-between">
+    CVSS score calculator
+    <div class="fs-3"><%= render 'dradis/plugins/calculators/cvss/version_menu' %></div>
+  </h1>
 <% end %>
 
 <p class="lead">Use this page to calculate the <abbr title="Common Vulnerability Scoring System">CVSS</abbr> score of a given finding.</p>
 
 <p class="alert alert-danger d-none" data-behavior="cvss-error"></p>
 
-<div class="row">
-  <div class="col-lg-8">
-
-    <h2 data-cvss="baseMetricGroup_Legend">
-      Base: <span id="base-score">0</span>
-    </h2>
-    <%= render 'dradis/plugins/calculators/cvss/base/base' %>
-
-    <h2 data-cvss="temporalMetricGroup_Legend" class="mt-5">
-      Temporal: <span id="temporal-score">0</span>
-    </h2>
-    <%= render 'dradis/plugins/calculators/cvss/base/temporal' %>
-
-    <h2 data-cvss="environmentalMetricGroup_Legend" class="mt-5">
-      Environmental: <span id="environmental-score">0</span>
-    </h2>
-    <%= render 'dradis/plugins/calculators/cvss/base/environmental' %>
-  </div>
-
-  <div class="col-lg-4">
-    <textarea name="cvss_fields" rows="52" class="form-control mb-4">#[CVSSv3.Vector]#
-N/A
-
-#[CVSSv3.BaseScore]#
-N/A
-
-#[CVSSv3.BaseSeverity]#
-N/A
-
-#[CVSSv3.TemporalScore]#
-N/A
-
-#[CVSSv3.TemporalSeverity]#
-N/A
-
-#[CVSSv3.EnvironmentalScore]#
-N/A
-
-#[CVSSv3.EnvironmentalSeverity]#
-N/A
-
-#[CVSSv3.BaseAttackVector]#
-#[CVSSv3.BaseAttackComplexity]#
-#[CVSSv3.BasePrivilegesRequired]#
-#[CVSSv3.BaseUserInteraction]#
-#[CVSSv3.BaseScope]#
-#[CVSSv3.BaseConfidentiality]#
-#[CVSSv3.BaseIntegrity]#
-#[CVSSv3.BaseAvailability]#
-
-#[CVSSv3.TemporalExploitCodeMaturity]#
-#[CVSSv3.TemporalRemediationLevel]#
-#[CVSSv3.TemporalReportConfidence]#
-
-#[CVSSv3.EnvironmentalConfidentialityRequirement]#
-#[CVSSv3.EnvironmentalIntegrityRequirement]#
-#[CVSSv3.EnvironmentalAvailabilityRequirement]#
-
-#[CVSSv3.ModifiedAttackVector]#
-#[CVSSv3.ModifiedAttackComplexity]#
-#[CVSSv3.ModifiedPrivilegesRequired]#
-#[CVSSv3.ModifiedUserInteraction]#
-#[CVSSv3.ModifiedScope]#
-#[CVSSv3.ModifiedConfidentiality]#
-#[CVSSv3.ModifiedIntegrity]#
-#[CVSSv3.ModifiedAvailability]#
-</textarea>
-  </div>
+<div id="v3-index d-none" data-cvss-version="3">
+  <%= render 'dradis/plugins/calculators/cvss/base/v3/index' %>
+</div>
+<div id="v4-index d-none" data-cvss-version="4">
+  <%= render 'dradis/plugins/calculators/cvss/base/v4/index' %>
 </div>